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THE RUSSIAN CIPHER DEVICE K-37 


1. The attached is an Armed Forces Security Agency translation of a 
paper by Dr. Grinosen entitled: "Russisches Chiffriergorat X 37" rocontly for¬ 
warded by Headquarters, Army Security Agency, Europe. 

2. Apparently Dr. Grlnmsen nado a careful study of thie machine based on 
one captured early In the war. 

3. Attention io called to the study of the K 37 already translated and 
lsaued an DF 7k. 


September 1950 


35 copies 


Translated: WJH 


12 pa r ;es 


Distribution: Normal 
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Tha Buselan Cipher Device K-37 
Time of Examination: I9k2 


Summary: 


A. Cryptographic-Technical: 

* 

1) Hagelin patent, corresponding to the 
French machine B-211 with certain changes. 

2) Cryptographic security only conditionally 
sufficient. 


B. Technical: 


Well built throughout from the point of view 
of construction, mechanically such clean work 
that it is probable that the device is not of 
Russian manufacture. The contrary, however, 
cannot be proven. 

C. Operational: 

The device is Just being introduced and has been 
issued to same offices of the Russian Army but not 
yet put into use (report dated September 19^1). 

The device is supposed to replace all other crypto¬ 
graphic systems * (Up to this point the Russian Army 
probably used only hand systems). 
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The Russian Cipher Dovlco K-37 

The device io Intended for enciphering plain text and for converting enciphered 
text Into plain text. By striking the keyboard, the enciphered or deciphered text 
is printed on a narrow roll of paper. 

Illustration l shows a coasplote view of the apparatus. Illustration 2 the 
Inside view. 

The keyboard (1) contains 30 letter keys and 1 space koy. The letter keys 
work together with 11 selector bare which lie under the koye and which ore divided 
into two groups of 5 und 6 selector bars each. Lot us designate the groups as B 
end o. The keys are coordinated with the selector taro in such a way that the 
pressing of a key activates one B and one S bar. Each bar is provided with a con¬ 
tact which when closed oxcites a raagnst (3). Correspondingly there are also two 
groups of magnets, 1. e., 5 + 6 = 11 magnets. An additional magnet la assigned to 
the spacing function. Each magnet for its part effects the adjustment of a selector 
ring in the printer (4). The solector rings (not visible in tho illustration) have 
not'Aoa which are so arranged that with a movement of one soloctor ring each from 
the B and 8 groups one of the 30 draw bars is released. It then cnaps forward 
under che influence of a spring and in doing so its front end arrivco in the path 
of a rotating stop. This stop is fastened to a type wheel which is driven by moans 
of a friction coupling and thus at tho forward snap of a draw bar is held at a 
certain position. Like tho 30 draw bars the typo wheel ( 5 ) can be held at 30 differ¬ 
ent positions and for that reason it contains 30 characters. 

Each time a key is preseed, then via the roundabout way of magnet activation 
a character is Printed. Which character io printed depends upon the association 
of tho selector bare to the magnets. The encipherment is effected by tho trans¬ 
position of the electrical connections between these two elements!'Tno transposition 
can therefore be undertaken only within tho two groups R and 3 , for only so is thare 
a guarantee that at each striking of a koy an B and an 8 magnet will be excited, 
which condition, as wo have seen, must be fulfilled for tho printing of thin 
character. 
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Id order to carry out the transposition, there are two wheel switches (6 and 
7) with 5 and 6 current paths respectively. They have 10 and 12 settings respec¬ 
tively so that there can be 10 and 12 different associations respectively, e. g. 

Flrat group Second group 


Key contacts 



ABODE 

A B C D j; 


Magnets A B C'd E 

The external structure of the wheel switches can be seen In illustration 3, 
the wiring in illustration i>. On its disc-shaped part the wheel has 10 or 12 con¬ 
tacts a, as the case nay be, of vhioh two aro always connected one with the other 


and with a collector ring b. Standing opposite the 10 or 12 contacts a are 5 or 6 
opring contacts thereafter called "brushes"). The lead to the collector rings 
proceeds via the collector springs d. 


The two svitoh wheels are advanced independently of one another by a set of 
wheels with adjustable pins, whioh is reproduced schematically in illustration 5 . 
For each wheel switch there are 2 pin wheels a and h. These have 29, 27 , 23 and 
19 adjustable pins. When the adjustable pins are in ■'+ position", they engage a 
snail intermediate wheel c and thereby edvanco the switch wheel d by one position. 
This forward movement therefore occurs when one of the two associated switch wheels, 
or both simultaneously, engages a pin vhioh is in + position. The leads to the 11 
selector bar contacts, to the 11 magnets and to the 22 inlets and outlets of the 
wheel switches ere all gathered together in a coble which terminates in a multiple 
plug. The matching plugbox (which was missing in the machine examined) i 8 obviously 
connected to a switch system which allows any desired association of the contacts, 

magnets and switch wheel Inlets within the R and the S groups. (Supplemental change 
of wiring!) 

By means of a mechanical switch the set of pin wheels can be uncoupled so that 
the wheels can be reset independently of one another. The switch has four positions 
and in addition to coupling the set of wheels it also causes the following changes: 
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1) Position 11 T n *, probably "testing". 

The set of wheels is uncoupled. Key ^ and the space key can ho activated. 

The latter always yields a apace by exciting the space magnet. 

2) Position "3" * protably "enciphemonV. 

Key 1 is blocked. The space key yields a character according to the 
encipherment. The enciphered text is divided into groups of four. 

3) Position "p", probably '’decipherment”. 

Key 1 is open. The space key la blocked. Continuous text is printed. 

A space appears Instead of the cbaraoter % • 

4) Position " 3 _p n . Purpose unclear'. The space key is blocked, key 1 is 
open. Division into groups of four. 

The device is of slight weight and has snail dimensions (275 x 275 x 155 
^centime ters7) • It makes very little noise. The workmanship of the part 3 is very 
neat, hut many parts seem too tiny for use under field conditions. The support 
of the switch wheels is especially precarious. Power is furnished by a 24-volt 
direct current motor. 

Cryptographic-Technical Examination 

Diagram 1 shows the echome of encipherment. On the left-hand siao the key¬ 
board is represented, and here the Cyrillic letters have boon replaced by Latin 
letters. Next to it and below it are the matching key contacts A to F 

*---——— -- 

Tra olator'e note: In these four cases it in believed that in the German text 
the characters in quotes wore attempts to represent the Cyrillic alphabet while 
using a typewriter with only Latin letters. Consequently those letters appear 
in this tr relation in their Cyrillic form. The original Latin and the Cyrillic 
characters along with their probable expansions are as follows: 

1) T , T , TLKCT * text /J plain/; 2) " 3 ", " 3 ", 3/lLVOPOB/Ht E 

~ encipherment; 3 ) "P", "P", P/Cli/.OPOB/WE = decipherment; and 4) the com¬ 

bination of 2) and 3) above. Support is lent to this belief by the fact that in 
paragraphs describing 1) and 3 ) was represented by a Latin H with a breve above it 
In addition, at least on come Russian typewriters the eano character is uced to 
represent both the digit 3 and the Cyrillic letter 3 . 
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(group s in blaok) and A to E (group B In red). From tho central section cf the 
diagram it ia possible to see tha function of tho two wheel switches. The 
"brushes" I to V and I to VI are always connected with the "collector rings"(l to 
5 and 1 to 6) which are inserted in a vertical column. 

The 10 and 12 vertical columns correspond to the 10 and 12 settings of tho 
two switch wheels. The "brushes" are linked with tho key magnets, likewise tho 
"collector rings" with tho magnets A to E and A to F. The right side of diagram 1 
shows the association of the characters to the megnots. 

In deciphering the reverse holds true; the key contaots are linked with tho 
collector rings and the magnets with the brushes. (Naturally it is also possible to 
encipher with this second wiring and to decipher with the first). 

From the diagram vo can see that the sequenco of tho collector rings is tho 
same for each brush, only tho start of the sequences is different. Since the 
collector rings are associated with certain magnets and the bruehos with certain 
contacts, wo can therefore substitute in the diagram for tho numbers the letters of 
the magnets and contacts. We then find in the following example: 

Magnets 

BEDFCBADFCEA 
EABEDFCBADFC 
FCEABEDFCBAD 
ABFCEABKDFCB 
CBADFCEABEDF 
DFCBADFCEABE 
Fran the diagram ve can see that it suffices to obtain a vertical and a horizontal 
line in order to detexmtne the whole diagram, i. e., the whole key. Bocauso of tho 
fact that the switch wheel is not moved forward at every character struck, the 
switch sequence ia changed in such a way that the vortical columns are repeated, e. g. 


Contacts 

£ 

A 

F 

D 

B 

C 
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Contacts Magnets 

E B S B D F F F F C B A D D D F F C E £ £ A 

A SAABESEEDFCBBBAADFZEC 

y F C C E A A A A B B D F F F C C B A A A D 

D A D D F C C C C E A B E E E D D F C C C B 

B C B B A D D D D F C E A A A B B E D D D F 

C D F F C B B B B A D F C C C E E A B B B E 

If there is a "conprcaieed text", i. o., If vo have a piece of plain text and the 
Batching cipher tart, then ve also know the sequence of the contacts and nagneto, 
e. g.: 

(Group 8) 

Contacts CADBBEFKACBFEED 

Magnets ACBFDFADBAEBDDE 

The underlined positions give the first cluo. Tho arrangecont of the 6Vitch wheel 
of group 8 shews no position whore the earns oagnot acta twice in succession. The 
nagnet sequence DD for the contact sequence EE aunt therefore be duo to a standstill 
of the switch wheel. Conversely at the position where the nagnet sequence FD 
appears for the contaot sequence BB there must have been o forward nevemont. 

The nuaher of teeth of the pin wheels are known (19 and 23 ). Since a stand- 
still occurs only when at this position both vhcolo have a "standstill position", 

1 . e., no advancing pin, wo know that "standstill" is again produced after 19 stops 
by the one wheel and after 23 steps by the other wheel. If dcapite this foot at 
such a position an advance has occurred, then this oust bo duo to tbo other wheel. 

We have thus obtained an "advancing pin". Taking into account tho peculiarities of 
the nagnet sequences as given by the known wiring of tho switch wheel, it beocisos 
easily ponelble with about 1J0 letters of coopranioed text to obtain the pattern 
ox the pin wheels and the association of tho oagnots to tho contacts. If by change 
we find rather long sequences of identical contacts which hit on a rather long 
standstill period, the text required can bo nuch shortor. To detoralno tho group 
R is acre difficult in that, because of the particular wiring of the srritch vbeol, 
even where there is stepping the cane nagnet is switched on twico in euccosoion 
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(see illustration contacts e). Despite this wo do reach our goal by experi¬ 

mentally associating in succession each of the five magnets with the double con¬ 
tact. Here the false assumptions lead to contradictions so that the correct 
association is left as the only possible ono. 
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